Read the docs
Red Hat Security Advisory

RHSA-2023:5396

Red Hat Data Grid 8.4.4 security update

Released 2023-09-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

TI-2023-17287 CVE-2023-34462 · GHSA-6mjq-h674-j845

netty-handler SniHandler 16MB allocation

Priority LOW 34

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02459 Published 2023-06-22 Partial fix · 4.1.94.Final CWE-400
TI-2023-04814 CVE-2023-5236 · GHSA-488m-w9fp-5mm2

Infinispan: circular reference on marshalling leads to dos

Priority LOW 31

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01108 Published 2023-12-18 Partial fix · 4.6.2.Final CWE-1047
TI-2023-03388 CVE-2023-3629 · GHSA-r4w2-hjmr-36m7

Infinispan: non-admins should not be able to get cache config via rest api

Priority LOW 30

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00721 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304
TI-2023-03387 CVE-2023-3628 · GHSA-fhr7-8jx4-r9cp

Infispan: rest bulk ops don't check permissions

Priority LOW 30

A flaw was found in Infinispan's REST.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00797 Published 2023-12-18 Partial fix · 15.0.0.Dev04, 14.0.18.Final CWE-304